Re: Snort Signature for Meltdown and Spectre location

["Joel Esler \(jesler\) via Snort-sigs" <snort-sigs () lists snort org>]

Edam,

I have verified that they are present in the currently available downloadable Subscriber Snort ruleset available on 
Snort.org<http://Snort.org>.


--
Joel Esler | Talos: Manager | jesler () cisco com<mailto:jesler () cisco com>






On Jan 8, 2018, at 10:29 AM, Edam Colon via Snort-sigs <snort-sigs () lists snort org<mailto:snort-sigs () lists snort 
org>> wrote:

Good Day,

I'm trying to find the snort signatures with the SIDs 45357 through 45368 for the Meltdown and Spectre that was 
recently released. I see that it is supposed to be in the os-other.rules file but when I access the file the rules are 
not there. Any help or direction to those signatures would be greatly appreciated. Thank you!

V/R

Edam
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org<mailto:Snort-sigs () lists snort org>
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a 
href=" https://snort.org/downloads/#rule-downloads";>emerging threats</a>!

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a 
href=" https://snort.org/downloads/#rule-downloads";>emerging threats</a>!